CVE-2021-37740 Denial of service in n/a
Remote attackers can cause denial of service on MDT KNXnet/IP Secure devices by sending a malformed SESSION_REQUEST frame, requiring a reboot to recover.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2021-37740?
CVE-2021-37740 is a high-severity denial of service vulnerability in n/a, published on 20 Apr 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A denial of service vulnerability exists in MDT's firmware for the KNXnet/IP Secure router SCN-IP100.03 and KNX IP interface SCN-IP000.03 before v3.0.4, that allows a remote attacker to turn the device unresponsive to all requests on the KNXnet/IP Secure layer, until the device is rebooted, via a SESSION_REQUEST frame with a modified total length field.
Which versions are affected by CVE-2021-37740?
It affects 2 products.
Products include Mdt Scn-Ip000.03 Firmware, Mdt Scn-Ip100.03 Firmware.
How do I fix CVE-2021-37740?
No fix has been published for CVE-2021-37740 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2021-37740 being exploited?
There is no known exploitation of CVE-2021-37740 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-fgcc-2fx7-p23v.